9 - Single Sign-On

Abstract

This chapter focuses on the architectural approaches one can take when designing an single sign-on (SSO) solution for a large IT infrastructure and on the security technology building blocks that can be used to construct such an SSO infrastructure. SSO is the ability for a user to authenticate once to a single authentication authority and then access other protected resources without reauthenticating. The open group defines SSO as the mechanism whereby a single action of user authentication and authorization can permit a user to access all computers and systems where that user has access permission, without the need to enter multiple passwords. SSO is advantageous for both users and administrators. There is no need to point out that a user and an administrator's life becomes much easier if they have to deal only with a single set of credentials––one for every user.